$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: 8GC4OJYCbQVIqeGEoYfo2WJt3ZtVgikP10CGUZDsehw= Subject key identifier: 85:42:D8:34:E4:A8:D6:E9:50:D6:32:36:6B:A2:13:0A:2E:08:72:69 Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 0311 Signing time: Wed 05 Nov 2025 01:14:08 +0000 Manifest this update: Wed 05 Nov 2025 01:14:07 +0000 Manifest next update: Wed 12 Nov 2025 01:14:07 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: APytdnkV/IexSYuq+oA6Rp7MFX2Ub60glQigql97PVs=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Nov 5 01:14:07 2025 GMT Not After : Nov 12 01:14:07 2025 GMT Subject: CN=690aa4e0-29a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:30:87:c0:3a:f8:74:69:f5:45:a5:0d:72:3d: 1e:ee:fb:d4:99:cd:b9:82:34:2f:19:f5:63:1f:52: 71:01:d8:c0:1c:39:dc:53:9b:eb:60:77:0f:ce:d8: 82:66:b0:7e:4c:39:f2:8d:80:f0:a5:67:c9:e2:bc: cb:7a:01:63:bb:51:83:b6:99:d9:c4:e4:cc:48:4e: 85:44:e1:a8:78:d9:9a:26:36:51:ea:88:01:ea:a0: 3a:29:64:e4:93:50:5f:c7:41:60:38:fc:9c:07:29: 8e:56:88:13:a3:d4:76:9c:4d:0f:58:15:02:a5:18: 28:ba:a1:f6:f3:58:ef:44:a1:60:9d:73:91:99:ef: 65:16:65:6f:fd:84:a0:49:2a:b4:61:fb:4a:e4:7c: 61:aa:d2:94:b7:d5:3b:19:87:1d:86:04:52:5c:91: b2:15:fd:9c:74:69:1a:1b:f2:95:cc:90:ce:63:3c: ad:c5:10:99:4d:2b:76:b3:02:26:ae:a0:46:d6:80: d2:07:42:a8:64:60:11:9f:63:9b:d9:03:9b:47:54: ec:78:26:37:e8:d7:2e:94:43:30:30:50:08:de:49: 38:07:15:f9:f7:73:25:e7:eb:f6:7c:a9:d4:a7:87: 70:40:6c:ca:a1:2b:83:e3:f7:16:d4:b4:98:7c:25: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:D8:34:E4:A8:D6:E9:50:D6:32:36:6B:A2:13:0A:2E:08:72:69 X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:85:f6:94:19:04:57:f7:00:02:3e:3e:e1:54:a2:f7:bf:4c: 6d:ea:21:7a:ad:29:77:5e:d1:37:e2:4f:ef:a3:1e:7c:84:70: aa:55:72:14:4c:74:67:2d:56:5c:c8:33:69:93:03:cc:66:e0: bd:a1:7d:44:82:65:83:30:59:bc:33:4f:6e:5f:98:66:9b:91: 7e:26:d1:b7:a5:b6:d6:3a:bf:47:67:d3:ff:a8:1f:15:d6:47: 52:98:51:1d:ce:b8:66:06:e4:1f:80:80:cb:ff:e7:23:59:16: 6d:ea:e3:ab:63:f8:ea:58:99:39:c4:ed:c8:d0:73:78:17:88: 3c:a4:02:cb:ec:a5:21:97:8f:03:4b:15:d2:75:72:f2:01:bd: f5:51:ca:03:35:e7:5a:4e:2c:e5:62:9c:03:d9:22:fe:9f:8a: f3:3e:40:45:fa:16:33:c3:55:34:19:7e:2d:50:dc:94:db:ef: 53:65:e0:9b:d7:d8:9c:02:d3:52:f9:d3:56:10:a5:14:5e:12: b8:51:57:e6:0d:f6:35:23:78:c3:48:f9:52:b1:08:cf:27:e1: c9:67:24:93:34:5c:c3:e7:91:92:36:12:bd:79:e9:c8:59:2c: 45:3c:35:3a:ec:75:85:dd:55:0a:73:73:c7:06:57:8d:59:41: 79:02:d2:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUxMTA1MDExNDA3WhcNMjUxMTEyMDExNDA3WjAYMRYwFAYD VQQDEw02OTBhYTRlMC0yOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jCHwDr4dGn1RaUNcj0e7vvUmc25gjQvGfVjH1JxAdjAHDncU5vrYHcPztiC ZrB+TDnyjYDwpWfJ4rzLegFju1GDtpnZxOTMSE6FROGoeNmaJjZR6ogB6qA6KWTk k1Bfx0FgOPycBymOVogTo9R2nE0PWBUCpRgouqH281jvRKFgnXORme9lFmVv/YSg SSq0YftK5HxhqtKUt9U7GYcdhgRSXJGyFf2cdGkaG/KVzJDOYzytxRCZTSt2swIm rqBG1oDSB0KoZGARn2Ob2QObR1TseCY36NculEMwMFAI3kk4BxX593Ml5+v2fKnU p4dwQGzKoSuD4/cW1LSYfCXGzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVC2DTk qNbpUNYyNmuiEwouCHJpMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAshfaUGQRX9wACPj7hVKL3v0xt6iF6rSl3XtE34k/vox58hHCqVXIU THRnLVZcyDNpkwPMZuC9oX1EgmWDMFm8M09uX5hmm5F+JtG3pbbWOr9HZ9P/qB8V 1kdSmFEdzrhmBuQfgIDL/+cjWRZt6uOrY/jqWJk5xO3I0HN4F4g8pALL7KUhl48D SxXSdXLyAb31UcoDNedaTizlYpwD2SL+n4rzPkBF+hYzw1U0GX4tUNyU2+9TZeCb 19icAtNS+dNWEKUUXhK4UVfmDfY1I3jDSPlSsQjPJ+HJZySTNFzD55GSNhK9eenI WSxFPDU67HWF3VUKc3PHBleNWUF5AtKF -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:32 2025 by rpki-client